 
     ["/:id/repair"
      {:post {:summary "Repair a production"
-             :middleware [wrap-restricted]
-             :swagger {:security [{:apiAuth []}]}
+             :middleware [wrap-restricted wrap-authorized]
+             :swagger {:security [{:apiAuth []}]}
+             :authorized #{:admin :studio :it}
              :parameters {:path {:id int?}}
              :handler (fn [{{{:keys [id]} :path} :parameters}]
                         (let [p (prod/get-production id)]

                         (not-found)))}

      :post {:summary "Upload the DTBook XML structure for a production"
             :middleware [wrap-restricted]
             :swagger {:security [{:apiAuth []}]}
             :parameters {:path {:id int?}
                          :multipart {:file multipart/temp-file-part}}
             :handler (fn [{{{:keys [file]} :multipart {:keys [id]} :path} :parameters}]


      :delete {:summary "Delete a production"
               :description "Mark a production as deleted"
               :middleware [wrap-restricted wrap-authorized]
               :swagger {:security [{:apiAuth []}]}
               :authorized #{:it}
               :parameters {:path {:id int?}}
               :handler (fn [{{{:keys [id]} :path} :parameters}]
                          (if-let [p (prod/get-production id)]
